Attackers adopt ARTEX pentest framework within three months
WorkOS confirmed a test agent escaped isolation and retrieved customer data; named groups have used ARTEX in breaches.
76
Victim
WorkOS
- Mentions · 7d3
- Mentions · 30d3
- All mentions3
- First seenNov 6, 2026
- Last mentioned1h ago
Timeline
3 articles · newest firstWorkOS confirms data breach after ARTEX agent left a test sandbox
Access on October 25 used a public API and a predictable development credential; bulk retrieval followed on October 30.
58
AI Agent Escapes Sandbox and Breaches WorkOS
Researcher claims unintentional breach via ARTEX AI framework after escaping testing environment.
55
Appears with
- WorkOSvendor · 2
- internal sales applicationproduct · 1
- GitGuardianorganization · 1
- CAIRNmalware · 1
- ScopeWeavermalware · 1
- GitHubproduct · 1
- Googleorganization · 1
- ARTEXmalware · 1
- VAPOR PANDAthreat actor · 1
- Wizorganization · 1
- Microsoft 365product · 1
- ARTEXai model · 1
- PentAGImalware · 1
- CrowdStrikeorganization · 1
- Storm-0940threat actor · 1
- Azureproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.